GCVE - cpe:2.3:a:sap_se:sap_business_client:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_business_client:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Sap Se (`f8f3f5db-c060-5230-a8bd-f91674203607`)
Product	Sap Business Client (`8487bef7-3c14-53d9-8bb6-9c47d8b58b67`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-38150`	vulnerable	2026-06-08 05:32:55.496364	Details available MEDIUM (6.1) When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engineering attack, SAP Business Client versions - 7.0, 7.70, will allow him to read extremely sensitive data, such as credentials. This would allow the attacker to compromise the corresponding backend for which the credentials are valid. Published: 2021-09-14T11:14:59.000Z Updated: 2024-08-04T01:37:16.044Z Open on db.gcve.eu Reference links https://launchpad.support.sap.com/#/notes/3060621 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-6244`	vulnerable	2026-06-08 05:26:44.887389	Details available HIGH (7) SAP Business Client, version 7.0, allows an attacker after a successful social engineering attack to inject malicious code as a DLL file in untrusted directories that can be executed by the application, due to uncontrolled search path element. An attacker could thereby control the behavior of the application. Published: 2020-05-12T17:54:36.000Z Updated: 2024-08-04T08:55:22.319Z Open on db.gcve.eu Reference links https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222 https://launchpad.support.sap.com/#/notes/2911801	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-6228`	vulnerable	2026-06-08 05:26:44.807553	Details available MEDIUM (5.3) SAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could be exploited by an attacker under certain conditions to modify the installer. Published: 2020-04-14T18:32:25.000Z Updated: 2024-08-04T08:55:22.286Z Open on db.gcve.eu Reference links https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202 https://launchpad.support.sap.com/#/notes/2866752	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-2398`	vulnerable	2026-06-08 05:11:37.025668	Details available MEDIUM (6.7) Under certain conditions SAP Business Client 6.5 allows an attacker to access information which would otherwise be restricted. Published: 2018-03-14T19:00:00.000Z Updated: 2024-08-05T04:21:32.877Z Open on db.gcve.eu Reference links https://blogs.sap.com/2018/03/13/sap-security-patch-day-march-2018/ https://launchpad.support.sap.com/#/notes/2580967 http://www.securityfocus.com/bid/103370	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.